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(54) Infonrnatlon providing and processing apparatus and met»K>d, and program storage medium 


(57) Contents and fts key are supplied in different 
procedures. Licertse management program authenti- 
cates telephone-lntegrBted terminal device and authen- 
tk»tes first server or second server. Server LCM con- 
trols the receptk>n of contents and key transmissk>n re- 
quests and of data for kientifyir>g first server or second 
server, tf data for klentffying first server are recefved. 


contents arnJ its key are received from first server in a 
proceckjre conespon<fir)g to first server. If data for kJerv 
titying second server are received, contents arKJ its key 
are received from secornf server in a procedure corre- 
sponcfing to second sender. Server LCM controls the 
transmission of contents and its key to telephone-inte- 
grated terminaf devk%. 
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Description 

BACKGROUND OF THE INVENTION 


[0001] The present Invention relates gencfBlly to an 
tnfomiation provkfing apparatus and method, an infor- 
mation processfrig apparatus and method, and a pro- 
gram storage medium. More particularfy; the present In- 
vention relates to an Infonmatfon providing appar^s 
arKi method, an information processing apparatus and 
method, and a program storage medium that provide 
contents and a key for decrypting it or use ertcrypted 
contents. 

[0002] Ref erring to FIG. 1, there Is shown a schematk; 
cSagram llustrating one configuration of a prior-art cSg- 
ttal data transmisskm system. A personal computer 1 is 
connected to a communication network 4 constituted by 
a kx»l area r>etwork or the lnterT>et for exarr^>le. The 
personal computer 1 receives musk: data (hereafter re- 
f ened to as contents) from a contents server 22-1 or 
22-2 or read from a CO (Corrtpact Disk), compresses 
the received data by a predetem>ined compression 
scf)en>e (for exanrH>le, ATFIAC3 (tradenrKirk)), ef>crypts 
them by a predetermined encryptk>n algordfwn such as 
DES (Data Encryptk>n Standard), and records the re- 
sultant contents. 

[0003] The personal computer 1 also records usage 
concmion data indk^tive of the usage corK^tlons of the 
recorded encrypted contents. 

[0004] The usage cofKfitk>n data indk»te the number 
of portable devfees (also referred to as PDs) whk:h can 
simultaneously use the contents compliant with the us- 
age corKfitk>ns (nanr>ely, tt>e number of PDs that can 
checkout the contents, whk^ win be descnbed later), for 
example When a piece of contents has been checked 
out by the number of tnnes specified by the usage con- 
ditions, the personal computer 1 can reproduce this con- 
tents. 

[0005] A display operatk>n instructhg program 11 of 
the personal computer 1 displays the data (for exannple, 
music tWe or usage conditk>ns) associated wtth the con- 
tents recorded in the personal computer 1 and Inputs a 
checkout irtstrucdon for example to make an LCIUI (Li- 
censed Compfiant Module) 12, a sofhware module com- 
pliant with the SDMI (Secure Digital Musfc Initiative) 
staridard, execute a checkout operation for example 
corresponding to the kistruction. 

[0006] The LCM 1 2 of the personal computer 1 is con- 
stftuted by a group of modules whk^h control the use of 
contents only when the usage condmons specified by 
the copyright hokier of indivkiuat contents are satisfied, 
thereby preventing the copyright kifringement t>ased on 
noncompliant secondary use of the contents. The usage 
condrtk>ns include reproductk>n condition of the con- 
tents, copy condition, move condition, and accumulation 
condition. 

[0007] The LCM 1 2 makes an authentfcatton whether 
the devk;es connected to the personal computer 1 are 
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connpliant ones and executes the processing such as a 
movement of contents by a safe mettK>d. Ak>ng wfth this 
ixocessing, tf)e LCM generates a necessciry key, mari- 
ages ttie generated key, and ericrypts the contents wth 
5 this key, or controls the communk^ation with the con- 
nected devk:e$. 

[0008] The LCM 12 also checks a k>aded portable nr>e- 
dium 3 for its valkjrty, adds the usage concfitk>ns speci- 
fied by a server 5 to the contents (ericrypted), and stores 

10 the contents in the portable me<fium 3. 

[0009] The LCM 12 of the personal computer 1 sup- 
plies the stored encrypted contents along with the data 
(for example, musfc title or usage conditions) associated 
with tt>e contents to the a connected portaA>le devfcre 2 

IS arKl acconfingly updates the usage corxfitions (this t^K 
date operation is hereafter referred to as a checkout). 
To be nDore specmc, when a checkout is made, ttie per- 
mitted checkout count for the usage conc%k>ns for this 
contents is decromented by 1, the penmkted checkout 
20 count being stored in the personal computer 1. When 
the checkout count is 0, the relevant contents cannot be 
checked out 

P>010] The portable devk^e 2 stores in the k>aded port- 
able mecfiitfn 3 the contents supplied from the personal 
^ computer 1 (namely, the checked out contents) ak>ng 
with the data (for example, a musk: titie or usage condi- 
tior^) associated with that contents. 
[0011] The portak>le medhim 3, incotporating a stor- 
age mediimi such as a flash memory, is constructed so 
^ as to detachat>ly tit the portable dev»e 2. 

[0012] The portable devk^e 2 reproduces the contents 
stored in theportBt>le medium 3 on the t>asls of its usage 
condftions aiKl outputs a reproduced sigrtal to a head- 
phone for example, not shown. 
^ [001 3] For example, if tt>e user attempts the reproduc- 
tion of a certain piece of contents stored in the portable 
device 2 In excess of a reproductk>n count set as a re- 
production Irnit, the portable device 2 fails the attempt. 
[0014] The user can renr>ove the portable devk:e 2 
^ storing contents from the personal computer 1 to carry 
ft at>out and reproduce the contents stored In the porta- 
ble n^edium 3 to listen to the reproduced musk: for ex- 
ample t>y means of a headphorte for example. 
[001 5] When the portable devfc^e 2 is connected to the 
^ personal conYputer 1 via a USB cable for example, the 
portable devk» 2 and the personal computer 1 cross- 
authenticate each other. This cross-authentication Is 
bssed on a chaBenge-response scheme. In the chal- 
lenge-response scheme, to a certain value (or a cfial- 
so lenge) generated t>y the personal computer 1 , the port- 
able 6eyhce 2 makes a response with a value (or a re- 
sponse) generated by use of a secret key shared Ijy the 
personal computer 1 . 

[0016] A sender 5-1 accumulates contents com- 
pressed and erxirypted in predetermined algorithms and 
distrt>utes the accumulated contents on demand from 
the personal computer 1 . The ser^r 5-1 has the capa- 
bilities of a key server 21 -1 . a contents server 22-1 , and 
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8hop server 23-1. 

[0017] The key server 21-1 accumulates contents 
keys for deciyptfrig the contents si9>p8ed from the con- 
tents server 22-1 to the persormt computer 1 arxJ, in re- 
sponse to a request from the personal computer 1 , sup- 
plies a relevant contents key to the personal computer 
1 . Before a contents key supply operation starts, the key 
server 21-1 and the personal conr^uter 1 cross-autherv 
tfc^ate each other. The key server 21-1 encrypts the con- 
tents key with a temporary key generated by the cross- 
atithentfcation arxJ serKis the erx^rypted contents key to 
thepersortalcorriputerl.Thepersoruilcon^^uter 1 de- 
crypts the received contents key with the shared tem- 
porary key. 

10018) Requested tyy the per&onal computer 1, the 
contents server 22-1 suppfies the requested contents 
(encrypted) and its usage corxfitkn^s to the personal 
computer 1 via a communk»tk>n network 4. 
[00191 The shop server 23*1 provides the digital data 
(Inducfing a corrtents list of musk: titles and prices for 
example) associated with the contents to be provided 
by the contents server 22-1 to the personal computer 1 
and, in response to a contents purchase request from 
the personal computer 1 . supplies the URL (Uniform Re- 
source Locator) of the contents server 22-1 that supplies 
the requested contents and the URL of the key server 
21 -1 that suppBes a contents key for decrypting the sup- 
plied contents to the personal computer 1 . 
[0020] A server 5-2 accumulates contents com- 
pressed and erx^rypted in predetermined algorfthms arKl 
<fistributes the accumulated contents on demand from 
the personal computer 1 . The server 5-2 has the capa- 
biSties of a key server 2 1 -2, a contents server 22-2. and 
shop server 23-2. 

[0021] The key server 21-2 accumulates contents 
keys for decrypt^g the contents suppBed from the con- 
tents server 22-2 to the personal computer 1 and, in re- 
sponse to a request from the personal computer 1 , sup- 
plies a relevant contents key to the personal computer 
1 . Before a contents key supply operation starts, the key 
server 21-2 and the personal con^uter 1 cross-authen- 
tfcate each other. The key server 21-2 encrypts the con- 
tents key with a temporary key generated t>y the cross- 
authentication and serKls the encrypted contents key to 
the personal computer 1 . The personal conrtputer 1 de- 
crypts the received contents key with the shared iem- 
porary key. 

P>022] Requested by the personal computer 1 , the 
contents server 22-2 supplies the requested contents 
(erx^rypted) and its usage cor>ditk>ns to the personal so 
computer 1 via a communk:atk>n network 4. 
[0023] The shop server 23-2 provkies the digital data 
(including a contents list of musk: titles and prk^es for 
example) associated virfth the contents to be provided 
by the contents server 22-2 to the personal computer 1 55 
and, in response to a contents purchase request from 
the personal computer 1 . supplies the URL of the con- 
tents server 22-2 that supplies the requested contents 


and the URL of the key server 21 -2 that supplies a con- 
tents key for decrypting the suppBed contents to the per- 
sorwl computer 1 . 

[0024] Hereafter, if there is no r>eed for makir>g a cfis- 
5 tinctk>n t>^ween the server 5-1 and the server 5-2, they 
are generk»lly referred to as a server 5. Likewise, the 
keyserver21-1 and the key server 21 -2 are generfc:^ 
referred to as a key server 2 i . The contents server 22-1 
and the contertts server 22-2 are generteally referred to 
io as a contents server 22. Ttio shop server 23-1 and the 
shop server 23-2 are genertealty referred to as a shop 
server 23. 

[0025] The foOowtng describes a configuration of the 
capabames of a prk>r-art digital data transnrUsskMi sys- 
tem with reference to FIG. 2. In adcfitk>r> to the dtepiay 
operatk>n instructing program 11 and the LCM 12, the 
personal computer 1 executes an IP (Internet ProtocoO 
conrvnunk»tk>n program 13, an ISP (Internet Servfee 
Provfcler) connection program 1 4, and a PHS (Personal 
20 Handyphone System)/IMT (Intematkmat MobBe Tele- 
corTvmink:atk>n) communfeatkm program 15. 
[0026] The PHSAMT communk^tion program 15 is 
for communfcatkKi to be executed via a put>lk: swftched 
fine network 31. The ISP connectk>n program 14 is for 
2s connectk>n to an ISP 32. Tf>e IP communfcatk>n pro- 
gmm 13 includes protocols such as HTTP (HyperText 
Transport Protocol) 74 and WAP (Wireless Access Pro- 
tocol) 75 and hiakes conmunk^atkxi with the key server 
21, the contents server 22. or the shop server 23 via the 
^ communk»tk>n network 4. 

(0027] TheLCM12consistsofalk:ensennanagement 
program 51 , a downk>ad program 52-1 , a download pro- 
gram 52-2, arxl a format management program 63. 
[0028] Tt>e tk:ense martagement program 51 Is for 
35 mana^r>g the usage of contents urKSer the usage corv 
drtior^ of the contents and consists of a usage corKlitk>n 
managemerrt program 61. a CD ripping program 62, and 
a PD authentication program 63. 
[0029] The usage condition management program 61 
^ controls, on the t>asis of the usage condftk>ns of cor>- 
tents, the permissk>n or prohibftk>n of the checkout of 
the contents stored in the personal computer 1 and up- 
dates the usage comfition data as the contents is 
checked out The CO ripping program 62 reads contents 
^ from a CD k>aded In the personal computer 1 and ger>- 
erates the usage condrtioris relevant to the read corv 
tents. 

[0030] The PO aulhenltealk>n program 63 authenti- 
cates the portable devk^ 2 k>aded in the personal com- 
puter 1 . 

p)031] The download program 52-1 downk>ads corv 
tents and its contents key from the server 5-1 and con- 
sists of a key management program 64. a contents man- 
agement program 66, a key information receiving pro- 
gram 66, and a contents information receiving program 
67. 

IP032] The key managenr>ent program 64 authenti- 
cates the key server 21-1 and receives a contents key 
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from the key server 21-1 to rrmnage the recehred con- 
terits key in associatkm with the coritents. The key rnan- 
agerriem progrm 64 corislsts of a server authenticatkm 
progmm 71 and a receMng ptogyam 72. 
[0033] The server authentk:atk>n program 71 authen- 
tfcates the key server 21-1 as wW be descnbed. The re- 
cehring program 72 recehfes acontents key from the key 
server 21-1 via the communk»tk>n r>^work 4. 
[0034] The contents managerrient program 65 re- 
cefves contents and its usage concfition data from the 
contents server 22-1 via the communk»tion network 4 
and record the received conterto ar>d its usage condi- 
tten data. A receiving pro^^am 73 of the contents rf>an- 
agement program 66 receives the contents and its us- 
age cortcfitkHi data from the contents server 22-1 . 
[0035] The key information receiving program 66 re- 
ceives the URL off the key server 21-1 whteh supples a 
contents key relevar^ to a desired piece off contents from 
the shop server 23-1 . The contents infformatton receiv- 
ing program 67 receives, from the shop server 23-1 . the 
contents ID for the contents requested by the user and 
the UFtt. for ktentffying the contents server 22-1 th£rt sup- 
plies the requested contents. 

[0036] The downkjad program 52-2 downloads con- 
tents and its contents key from the server 5-2 and b the 
sarr>e in configuratk>n as the downk>ad program 52-1 , 
Its description t>eing sk]^)ped. 

[0037] The format management program 53 converts 
the co<&ig algorithm ar>d encryptk>n algorithm off the 
corrtents dowrUoaded from the contents server 22-1 or 
22-2 into predetermined algorithms and erx^rypts the 
contents read from a CO by a predetermined afgortfmi. 
The format managenDent program 53 consists of a sys- 
tem identricatfon program 68 and a format conversion 
program 69. 

[0038] The system identffk»tk>n pn>£pnam 68 klentmes 
whether contents is downloaded from the server 5-1 or 
the server 5-2. The format conversk>n program 69 con- 
verts the erx^oding algorfthm and encryptk>n algorttfim 
of the contents. 

[0039] The portable devfce 2 executes a Bcense man- 
agement pro^wi 81 , a key management program 82, 
arKi a contents managerrient program 83. 
[0040] The Ik^nse management program 81 consists 
of a usage conditk>n management progrevn 91 for mar>- 
aglng contents reprocfc>ctk>n count on the basis of tf>e 
usage corKiitions of the contents, a PC authentbation 
program 92 for authenticating the personal computer 1 , 
and a PM authentk»tk>n program 93 for authentk^ting 
the portable medium 3. 

[0041 J The key management program 82 encrypts the 
contents key supplied from the personal computer 1 with 
a storage key stored in the portable medium 3 in ad- 
vance and manages the encrypted contents key as 
stored In the portable medium 3. 
[0042] The contents management program 83 man- 
ages the contents sent from the personal computer 1 as 
stored in the pK>rtable medium 3. 


[0043] The portable mecfium 3 executes a Ifeense 
management program 1 01 , a key management program 
102, and a contents management program 103. 
[0044] The Iteense management program 101 has a 
5 PD authentk:atk>n program 111 for aulhentfeating the 
portable devk:» 2 and stores the usage concmion data 
off the contents, controlling the reacfing for example of 
the contents on the basis of the usage concfitkm data. 
The key management pro^^m 102 encrypts the corv 
10 tents key supplied from the portable devk» 2 with the 
storage key stored in advance to manage the encrypted 
contents key. The contents management progrwn 103 
stores the contents supplied from the portable device 2 
to manage tt>e supplied contents. 
IS [0045] The shop server 23-1 executes a key informa- 
tion sending pro£^am 121 , a contents infomfiation send- 
ing program 122. a contents-access program 123, ar>d 
an IP communk»tk>n program 124. 
[0046] The key kiformatk>n serKfing pro^m 121 
20 sends the URL off the key server 21-1 that supplies the 
contents key relevant to the contents requested by the 
user off the personal computer 1 to the personal corrfiu- 
ter 1 via the communk:atk>n network 4. 
(0047] The contents information sencfing program 
25 122 sends the URL of the contents server 22-1 that sup- 
plies the contents requested by the user of the personal 
computer 1 to the personal computer 1 via the commu- 
nication r>etwork 4. 

[0048] The browsing program 123 consists of a vfew- 
3a ir>gprogram 131 by whk:h the user of tfte personal com- 
puter 1 can view and Bsten to tt>e contents and a search 
program 1 32 by which the user of the persorml corrtputer 
1 can search for desired pieces of contents. 
[0049] The IP communk:atk>n pro-am 124 includes 
^ protocols such as HTTP 1 33 and WAP 1 34 for example 
and communk:ates with the personal computer 1 via the 
communteatfon network 4. 

[0050] The key server 21-1 executes an authentk:a- 
tion program 151 , a key distrt>utk>n program 152. a key 
^ storage program 153, a key generatk>n program 154, 
and an IP corrvnunfcatlon program 155. 
(0051 ] Tl>e authentk»tk>n program 1 51 authentkates 
the personcil computer 1 for example. The key cfistrt>u- 
tion program 152 distnbutes contents keys stored fr» the 
^ key storage program 153 to the authentk»ted personal 
computer 1 . The key storage program 163 stores cor>- 
tents keys generated by the key generatk>n program 
154. The key generation program 154 ger>erates cort- 
tents keys in association with partk:ular pieces of con- 
so tents. 

[0052] The IP communicatfon program 155 includes 
protocols such as KTTP 171 and WAP 172 to comrnu- 
nfcate with the personal conr^uter 1 for example via the 
communfcation network 4, 
55 [0053] The contents server 22-1 executes a contents 
storage program 191. a contents distribution program 
192. and an IP communk^tion program 193. 
[0054] The contents storage program 191 stores the 
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encrypted contents In association with contents IDs. 
The contents dtetributSon program 191 dtetrftnites, upon 
request from the personal computer 1 , the contents cor- 
responding to the contents ID stored In the contents 
storage pro-am 191 to the personal computer 1 . 
[0055] The IP convnunicatlon program 193 includes 
protocols such as HTTP 201 and WAP 202 to commu- 
nicate wfth the personal computer 1 via the communi- 
cation n^work 4. 

[0056] The shop server 23-2 is generally the same In 
configuration as the shop server 23-1 and therefore Its 
description wai be sk^>ped. The key server 21-2 is gen- 
erally the same In conftguratton as the key server 21-1 
and therefore Its description w9l be skipped. The corf- 
tents server 22-2 Is generally tt>e same in configuration 
as the contents sen^ 22-1 andtt>ereforeftsdescriptk>n 
wBI be skipped. > 

[0057] The folowirtg descrt>es the prk>r-art process- 
ing in whfeh the personal computer 1 downk>ads corf- 
tents from the server 5-1 aruf checks out the downk>ad- 
ed contents to the portable devfce 2. wfth reference to 
the flowcharts shown in RGS. 3 and 4. In step S101. 
the PHS/IMTconvnunk:atk>n program 15 of tfie person- 
al computer 1 establishes a connectk>n with the publk; 
swftched line network 31 . in step S201 , a ground statkm 
for example, not shown, in the put>lk: switched tine net- 
work 31 estatHishes a connection with the personal 
computer 1. 

[0058] In step S102, the ISP connectk>n program 14 
of the personal computer 1 estatHisftes a connectk>n 
with the ISP 32. In step S301, tfie ISP 32 establishes a 
connection wfth the personal computer 1 . 
[0059] In step S103, the IP conDmunk:ation program 
13 of tfie personal computer 1 establishes an IP com- 
munk:atk>n with the shop server 23. In step S401 , the 
IP conrwnunk:atk>n program 124 of the shop server 23-1 
establishes an IP communlcatton with the personal 
computer 1 . 

[OOSO] In step S4Q2. the contents-access program 
123 of ttfe shop senrer 23-1 sends the digital data for 
t)rowsing (for contents selectk>n) to the persortai conv 
puter 1 via the comnuinication n^work 4. in step SI 04, 
a t)rowser program, not shown, of the personal compu- 
ter 1 cfisplays the image or text corresporKling to the re- 
ceived (figltal data for browsirfg by the user. The browser 
program of the personal computer 1 also has capabRi- 
tles of allowing the user to test-view the downloaded 
contents in a stream reproduction manner and the con- 
tents-access pro-am 123 of the shop server 23-1 to 
search for a particular piece of contents t>y keyword to 
cfisplay the search results. The processes of steps S402 
and SI 04 are repeated in accordance with the request 
by tfie user of the persoriai computer 1 . 
[0061 J In step SI 05. the browser program of the per- 
sonal computer 1 sends a purchase request to the shop 
server 23-1 . In step S403, the contents-access program 
123 of the shop server 23-1 receives the purchase re- 
quest from the personal computer 1 . 


[0062] In step S404, the contents inf 6rmatk>n sencfing 
program 122 of the shop ser^ 23-1 sends, to the per- 
sonal computer 1 via tfie network 4. the contents infor- 
matkm including tffe URL of the contents sen^ 22-1 
5 ttfat distrftHJtes Vt>e contents specified in the purchase 
request received in step S403. In step SI 06, the cort- 
tents kifomrfatkm receiving program 67 of the persortal 
computer 1 receives the contents information from the 
sffop server 23-1. 
to [0063] In step S405, the key inf onnatkm ser>ding pro- 
-am 121 of tt)e shop server 23-1 serfds, to the personal 
computer 1 via the network 4, the key infomr>ation such 
as the URL of tfve key server 21-1 that distri>utes the 
contents key of the contents speckled in the purchase 
'5 request received in step S403. In step S107, the key 
informatk>n recelvkig progrevn 66 of the personal com- 
puter 1 receives the key Information from the shop serv- 
er 23-1. 

[0064] In step S10B, the IP communfeatk>n program 
^ 13 of tfie personal computer 1 establishes an IP corrv 
munfcation with the contents server 22-1 by use of tffe 
URL of the contents server 22-1 included in the contents 
informatkm obtained in step SI 06. In step S501 , the IP 
communk»tk>n program 1 93 of the contents server 22-1 
-25 estabBshes an IP conrfection with the personal compu- 
ter 1. 

[0065] In step SI 09, the contents management pro- 
gram 65 of the personal computer 1 serfds the contents 
ID obtained In step S106 to the contents server 22-1 via 

30 the communfcation rf^work 4. In step S5Q2, the oorf- 
tents server 22-1 receives the contents ID from tffe per- 
sonal computer 1 . In step S503, the contents cfetrttnjtk>n 
program 1 92 tfie contents server 22-1 reads the corf- 
tents (encrypted) corresponding to the contents ID re- 

^ cehfed in step S502 from the contents storage program 
1 91 and distnbutes the contents to the personal compu- 
ter 1 via the communteatkm network 4. In step S11 0. the 
receiving program 73 of the contents management pro- 
gram 65 of the personal computer 1 receives the con- 

^ tents from the contents server 22-1 . 

[0066] In step S111, the IP communk:atlon program 
13 of tfie personal computer 1 establishes an IP com- 
nfunk^atlon wfth the key server 21-1 on the basis of the 
URL of the key senrer 21-1 contairfed In the key ^for- 
nrfatk>n obtained In step S107. In step S601 , the IP cortf- 
nffunk:8tion program 155 of the key server 21-1 estab- 
lishes an IP communk:atk>n with the personal computer 
1. 

[0067] In step S1 12, the server authentk^ation pro- 
so gram 71 of the key management program 64 of the per- 
sonal computer 1 authenticates the key server 21 -Un 
step S602, the authentication program 151 of the key 
server 21 -1 authentfcates the personal computer 1 . 
P>068) The key server 21-1 stores a master key KMS 
55 in advarfce and the personal computer 1 stores a private 
key KPP and the ID of the personal computer 1 in ad- 
varfce. The personal computer also stores a master key 
KMP in advarfce and the key server 21-1 also stores its 
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ID and private key KPS In advance. 
[0069] The key sefver 21-1 receives the ID the per- 
Gonal computer 1 from the personal computer 1 and ap- 
plies a hash function to the recefved ID and the master 
key KMS of the key server 21-1 to generate a same key 
as the private key KPP of the personal computer 1 . 
[0070] The personal computer 1 receives the ID of the 
key server 21-1 from the key server 21-1 and applies a 
hash functk>n to the received ID arKl the master key 
KMP of the personal computer 1 to gerverate a same key 
as ttteprh^ate key KPS of the key server 21-1. Conse- 
quently, the conrvnon private key id sfiared b^ween the 
personal computer 1 arKltfiekey server 21-1. By use of 
these private keys, a temporary key is generated. 
[0071] in8tepS113»thekeynrkanagementprogrQm64 
of the persortal computer 1 sends a cortf ents H> to the 
key sen^ 21-1. In step S603, the key server 21-1 re- 
cehres the contents ID from tfie personal computer 1 . In 
step S604, the key cPstrtnitlon program 152 <^ the key 
server 21-1 reads the contents key stored In tho key 
, storage program 153 in assodatfcm with the contents ID 
and serxis this contents key (endrypted by the tempo- 
rary key) to the persor>ai computer 1. In step S114. the 
recehnng program 72 of the key management program 
64 of the personal computer 1 receives the contents key 
from the key server 21-1. The key management pro- 
gram 64 decrypts the received contents key with the 
temporary key. 

[0072] In step S1 15, the PI-IS/IMT communk:ation 
program 15 of the personal compter 1 cfisconnects the 
communk^atkHi with the pubRcswitcfied line network 31 . 
In step S202, tf»e ground station, not shown, of the publk: 
switched tine network 31 disconnects the communtea- 
tk>n with the personal computer 1. 
[0073] In step S1 1 6, ttie format management program 
53 converts the coding algorithm and erx^ryption algo- 
rithm of the contents received In step S1 10 irrto prede- 
termined algorithms. 

[0074] When the user of the personal computer 1 in- 
structs the display operation instructing program 11 to 
check out tf>e receh^ed coritents, tf»e processes of steps 
S1 1 7 and the sut>sequent processes are executed. 
[0075] In step S117. the PD authentfcatkm program 
63 of the lk;ense management program 51 of the per- 
sonal computer 1 autfientfcetf es the portable device 2. 
In step S701, the PC authentk:atk>n program 92 of the 
license management program 81 of the portatHe device 
2 authenticates the personal computer 1 . 
[0076] The cross-authenticatfon processes between 
the personal computer 1 and the portable devk^ 2 in 
step S117 and step S701 is t>ased on a challenge-re- 
sponse scheme. As compared wfth the cross-authenti- 
catk>n t>etween the key server 21-1 and the personal 
computer 1 in step S1 12 and step S6Q2, the challenge 
response scheme needs less computatk)nal load. The 
personal computer 1 and the portable device 2 each 
genemte a temporary key from the response by a sanr>e 
computational operation and share the generated tem- 


porary key. 

[0077] In step S118, the contents management pro- 
-am 65 of the personal computer 1 cfistrtHites the en- 
crypted contents to the portable devfca 2. lnstepS702, 

s the contents management program B3 of the portat>le 
device 2 receives the contents from the personal com- 
puter 1 and supplies the received contents to the cor>- 
tents management program 103 of the portat>ierr)edium 
3. The contents management progrEim 103 of tfie port- 

10 able mecKum 3 stores the receh^ contents. 

[0078] It shouki be noted that the portat>ie devfce 2 
and the portable medwm 3 cross-euttientfcate wfth oth- 
er wf^en the portat>lenr>e<fium 3 is k>aded In the portable 
devfce2. 

IS IP079] lnstepS119,thekeymanagementprogram64 
of the pefBonal corriputer 1 distnbutes the contents key 
{encrypted wfth the temporary key shared t>^een the 
portable devfce 2 and the portable medium 3) corre- 
sponcfing to }he contents distritnited in step S118 to ttie 

20 portable devce 2. in step S703, the key rrmnagement 
program 82 of the portable device 2 recehres the con- 
tents key from the personal computer 1 andsqppfiesthe 
received contents key to the key managen>ent progrm 
102 of the portat>le medium 3. The key management 

^ program 102 of the portable medium 3 decrypts the re- 
ceived contents key and stores the decrypted contents 
key. 

[0080] The folk>wir>g describes the processing in 
whfeh the personal computer 1 downk>ads contents 

30 from the server 5-2 arxJci>ecks out the downk>aded con- 
tents to the portable devk:e 2, wfth reference to the fkyw- 
charts shown in FIGS. 5 arnJ 6. The processes of steps 
S1101 through S1107 are executed by tt>e server 5-2, 
the IP communication program 13, the ISP connectk>n 
program 14, the PHS/IMT communkratfon progrm 15, 
and the download program 52-2 and these processes 
are genemlly the same as the processes of steps SI 01 
through SI 07, so that their descfiptk>n8 will t>e skipped. 
[0081 ] In step S1 1 08. the I P communk:atk>n program 

^ 13 of the personal computer 1 establishes an IP com- 
munk^tion with ttie key server 21 -2 on tt>e bcisis of the 
URL of the key server 21-2 contained in the key kifor- 
matk>n ot>tained in step S1107. In step SI 601 , the key 
server 21-2 estat>ii&hes an IP comrruink^tion with the 
personal computer 1 . 

[0082] In step S1 1 09, the downk>ad program 52-2 of 
the personal computer 1 authentk^ates the key server 
21-2. In step SI 602, the key server 21-2 authentk^ates 
the personal contputer 1 . The processes of steps S 1 1 09 
so and SI 602 are the same as those of steps S112 and 
S602. 

[0083] In step S11 1 0, the downtoad program 52-2 of 
the personal computer 1 sends a contents ID to the key 
server 2 1 -2. In step S 1 603. the key server 21-2 receives 
55 the conter)ts ID from the personal computer 1 . In step 
S1604. the key sender 21-2 reads the contents key 
stored in association with the contents ID and sends the 
contents key (encrypted by the temporary key) to the 
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personal computer 1 via the communication n^work 4. 
In step Sim, the ck>wnload program 52-2 d the per- 
sonal computer 1 receives the contentB Icey from the key 
server 21-2. The downk>8d program 52-2 decrypts the 
received contents key with the temporary key. 
[0084] In step S1112, the IP communication pro-am 
13 the personal computer 1 establishes an IP oom- 
rruinication wfth the contents server 22-2 on the basis 
ol the UFO. of the contents server 22-2 contained In the 
contents Infonnation obtained in step S1 106. In step 
S 1 501 , the contents server 22-2 establsties an IP com- 
munfcatlon wfth the personal computer 1 . 
[0085] In step S1113. the download program 52-2 of 
the personal computer 1 sends the contents ID obtained 
In step S1106 to tt>e contents server 22-2 via the oonr>- 
nruinfcation network 4. In step SI 502. the contents serv- 
er 22-2 receives the contents ID supplied from the per- 
sonal computer 1. In step S1503, the contents server 
22-2 reads ttie contents (encrypted) corresponding to 
the contents ID received in step S1502 ar>d (fistrftMJtes 
the contents to ttie personal computer 1 via the commu- 
r)k»tk>n n^work 4. In step S1114. the dowrUoad pro- 
gram 52-2 of the persor>al computer 1 receives the con- 
tents dtetributed from the contents server 22-2. 
[0086] The processes of steps S1115 through SI 703 
are the same as those of steps S115 through S703 ar>d 
therefore their descriptions wfll t>e sk^ed. 
[0087] A8descnbed,theserver5-1 ar>dthesefver5-2 
that supply contents and contents keys have different 
procedures for supplying contents and contents keys. 
Therefore, tfte reception of contents from tite server 5-1 
and the server 5-2 requires different download pro- 
grams 52-1 arnJ 52-2 whteh correspond to the server 5-1 
arid tfie server 5-2 respectively. 

SUMMARY OF THE INVEMTION 

[0088] However, if a devk» that receives contents 
from these servers is r>ot enough in processfrig capabil- 
ity, namely, M the device has a low oomputkig power or 
a small storage capacity, tf>e devtee canrK>t store plural 
download programs and therefore carmot execute them 
by switching. 

[0089] It is ther^ore an object of tfie present invention 
to aOow devfc^es havir>g only a smcUl processlr>g capa- 
t>iKty to receive contents arYd contents keys whk:h are 
supplied in different procedures. 
[0090] In carrying out the invention arnl accordjr)g to 
one aspect thereof, there is provided an informatk>n pro- 
viding apparatus comprising: a first authentk^ation 
means for authentk^ating a first inforThatk>n processlrtg 
unit; a secorKJ authentication means for authentk»ting 
a second information processing unit or a third infomna- 
tfon processing unit; a reception control means for con- 
trolling the reception of a request to send contents and 
a key and data for identifying the second information 
processing unit or data for identifying the third infonna- 
tk>n processing unit, the request and the data being sup- 


pBed from the first informatk>n processing unit; a com- 
murricadon conlrol means for cor^oOkig, 9 the data for 
kSentnying the second information processir>g unft are 
received, the transmission of the request to send the 
s contents and the key to the secornJ infonnatkNi process- 
ing unit in a procecfcire corre8porKfir>g to the second k>- 
formatk>n processing unit, and, If the contents and the 
key are receded arKl the data for identtfying the third 
informatk>n processirtg unit are received frorh the seo- 

io ond inf ormatk>n processing unit, the transmisskm of the 
request to send the contents and the key to the third 
informc^ionprocessir^g unit and the reception of tt)ecor>- 
terrts and the key from tf)e third informatkm processing 
unR in a procedure corresponding to tfie thM informa- 
tion processing unft; and a transmission contrx>l means 
for controlmg the transmisskxi of the contents and the 
key to the first information processing unit 
[0091] The above-mentior)ed information provldkig 
apparatus further comprtsir>g: a conversion means for 

^ convertktg at least one of a encocting echeme and an 
encryptk>n scheme In whk^h tf>e contents is encoded 
and encrypted into one of a predetermined enco<Sng 
scheme and a predetermined encryption scheme. 
[0092] In the at>ove^entk>ned inf ormatkm provkjing 

^ apparatus, the first informatton processirig unit is a port- 
able eiectronk: deohce for reproductr>g the contents and 
the second informatk>n processing unft arul the third in- 
formation processing unit are servers each irK:luding a 
contents server and a key server and each having a <fif- 

30 ferent procedure in which contents and its key are sup- 
pOed. 

[0093] The above^nentioned irtfonnation provide 
apparatus furtfier comprising a server Icensed compli- 
ant module which is constituted as a proxy server. 

35 [0094] In carrying out the inventkm and according to 
a second aspect thereof, there is provkied an informa- 
tion provkiing method comprisir>g the steps of: autf>en- 
ticatlng a first information processing unit; autt)enticat- 
\ng a second inforrrtation processing unft or a ttitrd infer- 

^ matk>n processing unit; controfling tfie receptk>n of a re- 
quest to serKf contents and a key and data for identifying 
tfie second kif ormatk>n processing unit or data for kien- 
tlfying tt>e thkd informatk>n processing unft, the request 
and the data t>eir>g supplied from the first information 
processing unft; controlling. If the data for kientffying the 
second infonrnatk>n processing unft are received, tfie 
transmission of the request to send tfie contents and tfie 
key to tfie second information processing unit tn a pro- 
cedure corresponding to the second infonmatkm 

^ processing unft, and, if the contents and tfie key are re- 
ceived and tfie data for kJentifying the third informatk>n 
processing unit are receh/ed from the second informa- 
tion processing unit, the transmtssk>n of the request to 
send the contents and the key to tiie third information 

^ processing unft and the receptk>n of the contents and 
the key from the third information processing unit In a 
procedure corresponding to the third information 
processing unft; and controlling the transmission of the 
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contents and the key to the first tnf onmatlon processing 
unit 

(0095) The above-mentioned information provkfir>g 
method further comprising the step c/f: converting at 
least or>e of a erK»ding scheme and an encryption 
scheme in which the contents is erx^oded and encrypted 
into one of a predetermined ertcocKng schenr>e arKi a 
predetermined encryption scheme. 
[0096] In the al>ove-mentioned information provicSng 
method, the first information processing unit is a porta- 
ble electronic device for reproducing the contents and 
the second Inform^ion prt)cessing unit and the third in- 
forrr>atioh processing unft are servers each including a 
contents server and a key server artd each tiavbig a dif- 
ferent procedure In whkii contents arxi its key are sup- 
plied. 

[0097] In the above-mentk>ned informatk>n provkfir>g 
method, the method is executed by a proxy server in- 
cluding a server Scensed compliant module. 
[0098] In carrytig out tfie invention arxl according to 
stil anotf^ aspect thereof, tttere is provkied a progrwn 
storage mecfium storing a computer-readable program 
comprising the steps of: cuithenticatirYg a first inforrrwi- 
tion processir>g unft; authentfcating a secor>d informa- 
tion processing unit or a third information processir>g 
unit; controliing the reception of a request to serxJ cor>- 
tents ar>d a key and data for kientifying the second in- 
fomr>ation processing unit or data for kJentifying tf>e third 
information processing unit, the request and the data 
t>eing supplied from the first informatk>n prooesslrtg unt; 
controlling, t the data for kientifyfartg tfie second infor- 
mation processing unit are received, the transmission 
of the request to send the contents and the key to the 
second information processing unit in a procedure cor- 
responding to the second information processing unit, 
and. if the contents and the key are received and the 
data for kJentifyfng the third informatton processing unft 
are received from the secor>d trYformatk>n processing 
unit, the trarismisston of the request to send the contents 
and the key to the third information processing unit and 
the receptk>n of the contents ar>d the key from the third 
information processing unit in a procedure correspond- 
ing to the third Information processfrig unit; and control- 
iing the transmission of ti>e contents and the key to the 
first IrtformatkHi processtr>g untt. 
[0099] In carry{r>g out the inventk>n and according to 
yet another aspect tfiereof , t»>ere is provkJed an infor- 
mation processing apparatus comprising: an authenti- 
catk>n means for authenticating a first information pro- 
viding unit; a transmisston control means for controliing 
the transmissk>n of any one of a request to send con- 
tents and a key to the first inforrriatfon provicfirig unit, 
data for kientifying a second information provkiing unit 
for provkiing the contents and the key, arni data for iden- 
tifying a third information providir>g unit for providing the 
contents and the key; and a receptk>n control means for 
controliing the reception of the contents and the key sup- 
plied from the second informatk>n providing unit or the 


thM information provkiing unit to the first k)fonm^k>n 
provkfing untt. 

[0100] In the at>ove-mentk)ned lnformatk>n process- 
ing apparatus, tfie first informatkm providing unit is a 

5 proxy server havir^g a server licensed compliant nxxJule 
and the secorni Mormatk>n provkfing unit arfd the tfiird 
infonmatk>n provkiing unit are servers each inchicfirtg a 
contents server and a key server ar)d each having a de- 
ferent procedure in v/hidh contents arui its key are sup- 

fo pBed. 

[0101] ;ln the at>ove-nr>entioned information process- 
ing apparatus, the information processing apparatus is 
a portable electronk: devfce for reproducing the con- 
tents, 

IS [0102] The above-nr>entioned information processing 
apparatus has a download program capable of dowrv 
kiacfing contents from any of the secoTKi Information pro- 
vfcfir>g unt and the third informatkm provitSng unit. 
[0103] In carrying out ttie kiventkm and accorcftng to 
so a dffferent aspect tfiereof, there is provkied an Morma- 
tf on processir>g method comprfelr>g the steps of: autfien- 
ticatkig a first hifomration provkiir>g unft; controffing the 
transmisskm of any one of a request to send contents 
and a key to the first informatkMi provicfing unit, data for 
2s kientifying a secorxi lnformatk>n provkiing unit for pro- 
vkiing the contents arKl the key. arid data for identffying 
a third information provicfir^g unit for providing tf>e cor>- 
tents and tfie key; arKi controlling the reception of the 
contents and tf>e key supplied from tfie second informa- 
30 tion provicfing unft or the third inf ormatkm provkfing unit 
to tf>e first inf ormatk>n provkfing unft. 
[0104] In tfie above-mentioned information process- 
kig method, the first information providing unit Is a proxy 
server having a server ficensed compliant module and 
^ the second lnformatk>n provkfing unit and tfie third in- 
formation provicfing unit are servers eac^h having a con- 
tents server and a key server and each having a d^erent 
proceciure in whk:h cx>ntents and fts key are suppfied. 
£0105] In the above-mentk>ned information process- 
^ ing method, the metfiod is executed by a portable elec:- 
tronk^ devk» for reprcxiucing tfie contents. 
[0106] In the above-mentioned information proc^ess- 
Ing method, each of tfie reception controlling steps is 
exec^uted by a downk>ad program capable of downk>ad- 
^ ing contents from any of the second kifcxmation provki- 
ing unit and the third informatkm provkiing und. 
[0107] In carrying out the invention and according to 
a stiB ciffferent aspect thereof, tfiere is provkied a pro- 
gram storage mecfium storing a cx>mputer-readable pro- 
so gram (x>mprising: authentk^ating a first inf ormatkxn pro- 
vkfing unl; controOing the transmissk>n of any one of a 
request to send contents and a key to the first informa- 
tion providing unit, ciata for kient^ng a second nfor- 
mation provkfing unit for providing the contents and the 
^ key, and data for kientifying a third information provicfing 
unft for provkiNig the contents and the key; and control- 
ling the receptk>n of the eContents and the key supplied 
from the secx>nd infonmatk>n provkiing unit or the third 
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informatton provMing unft to the first information provid- 
ing unit 

[0108) The c^>ovearKl other objects, features arxJ ad- 
vantages of the presert invention and the manner of re- 
alizing them will become more apparent, and the Inven- 5 
tion itself will best be understood from a study of the 
following description and appended dainns with refer- 
ence to the attached drawirtgs 8howir>g some preferred 
embodiments of the invention. 


BRIEF DESCRIPTION OF THE DRAWIMGS 

[01 09) These arKJ other objects of the invention win 
t>e seen by reference to the descr^rtion, taken in con- 
r>ectk>n with the accompanyirtg drawing, in which: 

RG. 1 is a schematic diagrwi Riustrating a config- 
uration of a conventional digital data trartsmisslon 
system; 

FIG. 2 is a schematic diagram Btustratingafunctiori- 
al configuration of the conventional digital data 
transmission system; 

FIG. 3 is a flowchart descrfoirtg conventional 
processing in which personal computer downloads 
contents from server and chedcs out the dovmload- 
ed contents to portable device; 
FIG. 4 is a flowchart descrft>ing conventional 
processing in which personal computer downloads 
contents from the server and checks out the down- 
loaded contents to portable device; 
FIG. 5 is a flowchart descrft>ing conventional 
processing in which personal computer downloads 
contents from server and chedcs out the download- 
ed contents to portable devk:e; 
FIG. 6 is a flowchart describing conventional 
processing in whk^ personal computer downloads 
contents from server and checks out the download- 
ed contents to portable device; 
FIG. 7 is a schematk: diagram Olustrating one em- 
t>odtment of a cfigital data transnnission system €is- 
sociated with the present invention; 
FIG. 8 is a t>kx:k diacram Slustrating a configuration 
of telephor>e-lntegrated terminal devtee; 
FIG. 9 is a block diagram Stustrating a configuration 
of proxy server; 

FIG. 10 is a schematic diagram illustrating a func- 
tk>nal configuratk>n of the cfigitai data transmission 
system associated with the present irwentk)n; 
FIG. 11 is a fk>wchart descnbing processing in 
whk^ telephone-integrated terminal device down- 
loads contents from server, 

FIG. 12 is a flowchart describing processing in 
which telephone-integrated temninal devk^ down- 
loads contents from server; 

FIG. 13 is a fk>wchart describing processir>g in 
which telephone-integrated terminal devk» down- 
k>ads contents from server, 

FIG. 14 is a flowchart describing processing in 


whfch telephone- integrated terminal device dowr>- 

k>ad5 contents from server; 

FIG. 15 is a schematk: cSagrEvn ilustrating another 

functional configuration of the (figftal data trarismis- 

sk>n system associated with the present invention; 

FIG. 16 is a fkmchart descrft>{ng processing in 

whfch telephone-integrated terminal devk» dowrv 

k>ad8 contents from server; cind 

FIG. 17 is a fk>wchart descrft>ing processbg in 

whfch telephone-integrated terminal device dowr>- 

loads contents from server. 

DETAILED DESCRIPTION OF PREFERRED 
EMBODIMENTS 


IQIIO] This faiventkHi will be descrt>ed In further detail 
by way of exarrple wfth reference to the aoconripariy&ig 
drawings. 

[0111] Ref ening to RG. 7, ttiere is shown one embod- 

20 iment of a digital data transmissk>n system associated 
with the present tnventk>n. With r^erence to FIG. 7, 
components similar to those previously descrft>ed wfth 
FIG. 1 are derioted by the same reference numerate ar>d 
their descriptions w9l be skipped. 

^ IP112) A telephone-lnte£pBled termfr»l devfce 501 is 
constructed so as to detachably accomrrKKtate a porta- 
ble mecfium 3-1 ar>d Is connected to a communk:ation 
network 4 in a wireless manner. The telephone- integrat- 
ed terminal devtee 501 downtoads contents (com- 

30 pressed and encrypted in predetermirmd schemes) re- 
ceived from a contents server 22-1 or 22-2 via the com- 
munfeation network 4 and stores tfie downloaded con- 
tents into the k>aded portable medkim 3-1 ak>ng with da- 
ta such as usage corKfitions of the contents. 

^ [0113] On the basis of the usage corKlftk>n data asso- 
ciated with the contents, the telephone-integrated ter- 
minal devk:e 501 reproduces the contents stored in the 
portable medium 3-1 and outputs the reproductk>n to a 
headphone or speaker^ not shown. Carrying about the 

^ telephone-Integrated terminal devk^e 501 ^ its user can 
download any-desired piece of contents at any (tesired 
place to store the downloaded contents into tfie portable 
nr»e<fium 3-1. The user makes the telephone-^egrated 
terminal devk^e 501 repro<bice tfie contents stored in the 

^ portable medium 3-1 to listen to the musk: for example 
pertinent to the contents by means of the headphone for 
example. 

[0114] A display operation instructing program 51 1 of 
the telephone-integrated terminal device 501 displays 

50 the contents-related data (for example, musk: tides or 
usage condftions) and, when the user inputs a downk>ad 
instruction, makes a client LCM 512 to execute the cor- 
responding processing. The cfient LCM 512 of tele- 
phone-ffitegrated terminal devk^e 501 executes a se- 

55 quence of processes (to be described later) for dowrv 
k>adtng contents arnf its usage conditk>ns for example, 
in cooperation with a server LCM 514 of a proxy server 
503- 
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[0115] In order to prevent the copyrfght violation due 
to noncompliant secorKlary usage of contents, the cfient 
LCM 512 of the telephone-integrBted tennlnal device 
501 is constituted by a group of modules which control 
the use of contents onfy when the usage conditions 9 
specified by the copyright holder of incfividuat contents 
are satisffed. thereby preventing the copyright infringe^ 
ment based on noncompliant secondary use of the con- 
tents. The usage concfitions Include reproduction condi- 
tion, copy condition of the contents, nx>ve condition, and fo 
accumulation concfition. 

[0116] the client LCM 512 makes an authentication 
whether tfie portat>le mecSum 3-1 loaded in the tele- 
phone-integrated terminal device 501 is compliant one 
and adds tt>e usage condition data specified by the serv- is 
er 5 in a secure manner to the contents (encrypted), 
storing the contents into the portable medium 3-1 . With 
the moverrient <^ contents, the client LCM 512 gener- 
ates necessary keys, nnanages them, and controls the 
communication with the connected port^>ie medium ^ 
3-1. 

[0117] A personal computer 502 Is connected to the 
communication network 4. The personal computer 502 
converts the compression scheme and erx:ryption 
scheme of the contents received from the corrtents serv- 25 
er 22-1 or 22-2 or read from a CD into a predetermined 
compression scheme arxJ a predetermined encryption 
scheme such as DES, storir>g the resulting contents. 
The personal computer 502 records the data of usage 
corxfitions of the encrypted and rocorded contents. 30 
[0118] The display operatk>n instructing program 11 
of the personal computer 502 cfisplays tt>e contents-as- 
sociated data (for example, music titles or usage condi- 
tk>ris) arwJ, when a download ir)structk>n or a checkout 
instruction is iriputted by the user, makes an LCM 513 as 
of the personal computer 502 execute a corresponding 
download operation or checkout operation. 
(01 19] The LCM 51 3 of the personal computer 502 is 
constituted by a group of modules which control the use 
of contents only when the usage corvdrtions specified t>y 40 
the copyrigN hokier of Incfividual contents are satisfied, 
thereby preventing the copyright infrir>gement based on 
noncompliant secoTKiary use ol tfie contents. The usage 
conditk>ns include reproductkm condftk>n of the con- 
tents, copy corKfrtion, rrK>ve condition, artd accumulation ^ 
condition. 

[0120] The LCM 513 makes an authenticatfon wheth- 
er the portable devk^e 2 connected to the personal oorrv 
puter 502 Is compliant one and executes a contents 
moverT>ent process for example in a secure manner, so 
With lt>e nrK>vement of contents, the LCM 513 generates 
necessary keys, manages them, and er^crypts contents 
or controls the communication with the connected de- 
vice. 

[0121] Also, the LCM 513 checks the valkJity of the 55 
portable devee 2. When the portable medium 3-2 is 
loaded, the portable devk^ 2 checks the valWity of the 
portable mecfium 3-2. If the portable device 2 and the 


portable medium 3-2 are found valkJ, the LCM 513 adds 
the usage comfitk>n data specified by the server 5 to the 
contents (er>crypted) and checks out the resultant con- 
tents to the portat>le mecfium 3-2. The portadt>le devfce 
2 stores the contents checked out from the personal 
computer 502 into the k>aded portat>le mecfium 3-2 
along with the contents-associaled data. 
[0122] The LCM 513 of personal computer 502 
checks out the erxayptod recorded contents to tt>e cor>- 
nected potable devfce 2. The portable devk:e 2 stores 
the contents checked out from the personal computer 
502 into the k>aded portable nDedkjm 3-2 ak>ng wfth the 
corrtents-essodated data. 

P>123] If the proxy server 503 is available, a PC LCM 
521 (constitutedbypartor allof thehjnctfc>nalfty ofthe 
LCM 513) of the personal computer 502 executes a se- 
querK» of processes for dowrUoadlng contents ar>d Its 
usage contStkmB in cooperation wth the server LCM 
514 of the proxy server 503. 

IPI 24] If the proxy server 503 is unavallabie, the LCM 
51 3 of the penmud computer 502 authentfc^ates a key 
sender 21-1 or 21-2 as wfth the LCM 12todownkkad con- 
tents and fts usage conditior^. 

[0125] The proxy server 503 authenticates the key 
server 21 -1 or 21 -2 l>y executing the server LCM 514 h 
response to a request by the cross-authenticated lele- 
phone-kitegrated terminal device 501 or the cross-au- 
thenticated personal computer 502. After the cross-au- 
thentication wfth the key senrer 21 -1 or 21 -2, the proxy 
server 503 receives a contents key from the key server 
21-1 or 21-2 and suppOes the received contents key to 
the telephone-integrated terminal devk» 501 or the per- 
sonal computer 502. Recehdng tf>e contents from the 
contents server 22-1 or 22-2. the proxy server 503 sup- 
plies the received contents to the telephone-integrated 
terminal device 501 or the persor^ computer 502. 
[0126] When downk>adlng contents arKi fts contents 
key from the server 5-1 . the proxy server 503 first re- 
ceives the contents and then the contents key. When 
downloading contents and its key from the server 5-2, 
the proxy server 503 first recehfes the corUents key and 
then the contents. 

[0127] The proxy server 503, regarcfless of whether it 
has downk>aded conterrts and fts contents key from the 
server 5-1 or the server 5-2, suppfles the recehred cor>- 
tents and contents key to the telephor)e-4ntegrated ter- 
minal devfee 501 or the personal computer 502 In a 
same procedure (for example, first transmitting the con- 
tents key and then the contents). 
[01 28] Downloading the contents and its contents key 
from the server 5-1 ortheserver5-2 via the proxy server 
503. the telephone-integrated terrrvnal device 501 or the 
personal computer 502 can receive the contents and its 
contents key in tt>e same procedure. 
[01 29] FIG. 8 shows a configuratk>n of the telephone- 
integrated terminal device 501. A CPU (Central 
Processing Unit) 601 executes programs stored in a 
ROM (Read Only Menrwry) 602 or a RAM (Random Ac- 
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cess Memory) 603, Iho ROM 602, constituted by an 
EEPROM (Electricany Erasable Programmable Read 
Only MerTKMy) or a flash memory, generally stores pro- 
grams arnJ basically fixed data of computatiorYal param- 
eters to be used by the CPU 601. The RAM 603, con- 
stituted by an SRAM (Static Random Access MerT>ory) 
for example, stores programs to t>e used by the CPU 
601 in its execution and parameters which changes from 
tkne to time in the execution, 

[01 30] An ^iput block 605, constituted by an input key 
or a mk:n>phone. Is operated by the user when ir^Hitttng 
commands into the CPU 601 or inputting a vok». A dis- 
play bkx:k 606, constituted t>y a Iquld crystal cBsplayde- 
vfce, displays various klmte of informatk>n in the form of 
text or knage. 

[0131] An aucSo reproductk>n bkxk 607 reproduces 
the vok» data of the other party suppBed from a oom- 
munfcation bkxk 608 or the contents supplied from the 
portat4e metfium 3-1 via an Interface 609 ar>d sourKis 
the reproduced voice signal. 

[0132] The communfcatk>n t>kx:k 608 cormects to tt>e 
pubtk: switched lir>e network 31 stkI stores in predeter- 
mir>ed packets the data(for example, a contents send 
request) supplied from the CPU 601 or the vok» data 
of the user supplied from the Irtput block 605 ar>d serKis 
the packets via the public switched line n^work 31 . Al- 
so, the conrvnunk^atkm block 608 outputs the data (for 
example, contents) stored in recehred^packets or the 
voice data of the other party received via the pubSc 
swftched line network 31 to the CPU 601 . the RAM 603, 
the audk> reproduction bkxdc 607. or the interface 609. 
[0133] Ihe interface 609 stores tf>e data suppBed 
from the CPU 601 , the RAM 603, or the communfeation 
block 608 into the portable medium 3-1 and reads 6eAa 
such as contents from the k>aded portable medium 3-1 
to supply the data to the CPU 601 , the RAM 603, or the 
audio reproductk>n block 607. 

[0134] An interface 610 is connected to an extemaRy 
attached drive 631. The drive 631 reads data or pro- 
grams from a magr>etic disk 641 , an optk^al disk (includ- 
ing a CD-ROM) 642, a magneto-optfcal disk 643, or a 
semk:orKfcx:tor memory 644, whk:h is loaded in tfie drive 
631, and supplies these data or programs to the ROM 
602 or the RAM 603 via the interface 610 and a bus 604. 
[0135] The components, the CPU 601 through the in- 
terface 610, are interconriected by the bus 604. 
[0136] FIG. 9 shows an internal conflguratk>n of tf>e 
proxy sen^503. A CPU 651 executes various appPica- 
tk>n programs (whfch win be detailed later) and an OS 
(Operating System). A ROM 652 generally stores pro- 
grams and bask^ally fixed data of corT>putatk>naJ param- 
eters to t>e used t>y the CPU 651 . A RAM 653 stores 
programs to t>e used by the CPU 651 in Us execution 
and paramelers whk:^ changes from ilme to time in the 
execution. These are interconnected by a host bus 654 
constituted by a CPU bus for example. 
[0137] The host bus 654 is connected to an external 
bus 656 such as a PCI (Peripheral Component Intercon- 


nectnnterface) bus via a bridge 6SB. 
[0138] A keyboard 656 is operated by the user when 
Inputting commands into the CPU 651 . A pointing devfce 
659 is operated by the user wtien irxficatirvg a pokit on 

s a display nrKHitor 660 or seiectir>g flems thereon. TT>e 
cfisplay monitDr 660, constituted by a HqukJ crystal dis- 
play devtee or a CRT (Cathode Fte^ Tube), shows vari- 
ous informatkHi in text and image. A HDD (Hard Disk 
Drhre) 661 drives a hard disk to record or read programs 

io and information to t>e used by ttie CPU 651 to or from 
the hard cfisk. 

[01391 A drive 662 reads data or programs stored on 
a magneCk: disk 681, an optk»l cfisk 682, a ma^p^^o- 
optk»l dtek 683, era 8emkx>nductor memory 684, whfch 
Is k>aded In the drive 662, and suppOes these data or 
programs to the RAM 653 via the interface 657, the ex- 
ternal bus 656, the bridge 655, and the host bus 664. 
[0140] TT)esecom|x>nents,tt>e keyboard 658 through 
the drhre 662, are connected to the kvterf ace 657 whfch 

20 is connected to the CPU 651 via tf>e external bus 656, 
the brklge 655, and the host bus 
[0141] A communfcation t>lock 663, cormected to the 
communfcatfcn r)etwork 4, stores data (for example, a 
contents key) supplied from the CPU 6St or tfie HDD 

^ 661 Into predetermined packets and send them over the 
corTwnunfcatk>n network 4 arnJ, at thef same tkr>e, out- 
puts the data (for example, tl>e contents ID) stored in 
received packets over the network 4 to the CfHJ 651 , 
the RAM 653, or the HDD 661 . 

30 ipi42| The communicatfcn bkx* 663 is connected to 
the CPU 651 via the extemal bus 656, the bridge 656, 
ar>d the host bus 664. 

[01 43) The following describes a furKtional configura- 
lion of the cfigital data transmissk>n system associated 

35 with the present invention with reference to FIG. 10. 
With reference to RG. 1 0, components simiar to those 
prevkMJsly described with FIG. 2 are denoted by the 
same refererK:e numerals arwl therefore their descrip- 
tioris will be skipped. 

^ [0144] The telephone-integrated terminal devtee 501 
executes a display operatfcn instnictirig program 51 1 , a 
client LCM 512. an IP communfcation program 701, an 
ISP conr)ectk>n program 702, arKi a PHS/IMT comrmj- 
r>ication program 703. 

[0145] The PHS/IMT communfcatkm program 703 
makes communfcation via the pid>lfc switched fine net- 
work 31 . The ISP connectfcn program makes connec- 
tion to the ISP 32. The IP communfcation program 701 
includes protocols such as HTTP 741 and WAP 742 and 

so makes communfcatfcn with the key server21-1, the con- 
tents server 22-1 , the shop server 23-1 , the key server 
21 -2, tt>e contents server 22-2, the shop server 23-2. or 
the proxy server 503 via the conrununfcatk>n networic 4. 
[0146] The client LCM 512 is composed of a Ifcense 

55 management program 711, a downfcad program 712. 
and a format management progrEun 713. 
(0147] The Ifcense management program 711 man- 
ages the use of contents on the basis of contents usage 


11 


21 


EP1 134 949 A2 


22 


concfitkms and is composed of a usage coixfition man- 
agement program 721, a server authentication program 
722, ar>d a PM authentication pro-am 723. 
[0143] The usage condition management program 
721 control the permission or prohfeition of the repro- 
duction of the contents stored In the portable medium 
3-1 and makes the portable metfium 3-1 update the us- 
age condition data stored in the portable mec^jm 3-1 as 
the contents stored in the portable mecfium 3-1 is repro- 
duced. The server authentication program 722 authen- 
ticates the proxy server 503 via the communication net- 
work 4. The PM authentk»tk>n progr»n 723 8utt>entf- 
cates the portable me<flum 3-1 when tiie ported medi- 
um 3-1 is k>aded in the telephone-integrated terminal 
devk»501. 

[0149] The downk>ad program 712 is composed of a 
key management program 724, a contents manage- 
ment progrwn 725, a key inf ofmatk>n receiving program 
726^ arfd a contents Inf ormatkm receiving program 727. 
[0150] The key management program 724 receives a 
contents key from the proxy server 503 and manages 
the contents key by storing it Into the portable mecfium 
3-1 in association with the correspontfing contents. The 
key management program 724 ir>ciudes a recefvirYg pro- 
gram 731 for receiving contents Iceys from tt»e proxy 
server 503. 

[0151] Tt>e contents mariagement program 725 re- 
ceh^ contents (encrypted) and its usage cor>ditior)s 
from the proxy server 503 and stores the received con- 
tents and its usage conditk>rY8 into the portable medium 
3-1. The receh^ program 732 of the contents man- 
agement pro-am 725 receives contents and its usage 
conditions from the proxy server 503. 
[0152] The key information receiving program 726 re- 
ceives tfie URL klentifyfrig the key sender 21-1 or the 
key server 21-2 for supptymg the contents key corre- 
sponcfing to the contents from the shop server 23-1 or 
23-2. The contents information recervtng program 727 
receives the URL for identffyirig the contents server 22-1 
or 22-2 for supplying a desired piece of contents and the 
contents ID for kientifying it from tt>e sfK>p server 23-1 
or 23-2. 

(0153) The format management program 713 con- 
verts the encoding scheme aiKJ encryptkm scheme of 
the contents downk>aded from the contents server 22-1 
or 22-2 Into respective predetermined schemes. The 
format mar>agement program 713 is composed of a sys- 
tem identiTicatton program 728 and a fonmat conversion 
program 729. 

[0154] The system klentrfication program 728 klenti- 
fies whether a particular piece of contents has been 
downk>aded from the server 5-1 or 5-2. The format, con- 
versk>n program 729 converts the encocfing scheme 
and encryption scheme of contents. 
[0155] The folk>wffig descrft>es a configuration of the 
proxy server 503. The proxy server 503 executes the 
server LCM 51 4 and an IP communk:ation program 751 . 
[0156] The server LCM 514 includes a license man- 
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agement pro-am 761 and a sequence management 
program 762. 

[0157] The Rcense mancigement progrwn 761 In- 
ckides a server authenticatkHt program 781 for autt>en- 
tk»ting the key server 21-1 or 21-2 and a PD authenti- 
cation pro-am 782 for authentk^ting the telephone-^ 
tegrated terminal device 501 . 

[0158] The sequence nrwiagement program 762 ir>- 
ckides a key nr>armgement program 771, a contents 
management program 772, and a system kJerftiTication 
program 773. 

[0159] The key management program 771 includes a 
key receiving program 783 for receiving contents keys 
from the key server 21-1 or21-2 viathe communicatkm 
network 4 and a key dtetrftxjtkHi program 784 for dtetrib- 
uting the received contents keys to the telephone-inte- 
grated terminal devfce 501 via the communfcatkm net- 
work 4. 

[0160] The contents management program 772 In- 
ckjdee contents receiving program 785 for recehring 
contents from the contents server 22-1 or 22-2 via the 
communk»tk>n network 4 and a contents cfistributkm 
program 786 for (iistributing the received contents to the 
telephor>e-integrated terminal devk:e 501 via Ihe com- 
munication network 4. 

[0161] The system identifk»tion progrwn 773 identi- 
fies, on tf>e basis of the contents ID supplied from the 
tetephone-integrated terminal devk^e 501, whether a 
partictilar piece of contents has been downk>adedfrom 
the server 5-1 or 5-2. 

[0162] The IP communk»tk>n program 751 includes 
protocols HTTP 787 and WAP 788 and makes commu- 
nicatton witii the server 5-1 or 6-2 or tl>e telephone-^ 
tegrated terminal device 501 via the communicatk>n net- 
work 4. 

[0163] Tile following describes a process in whfch the 
telepr>one-integrated terminal devk:e 501 downk>ads 
contents from tiie server 5-1 wfth reference to the flow- 
charts shown in FIGS. 11 and 12. In step S2101, the 
PHS/IMT communication program 703 of the telephone- 
integrated terminal device 601 establishes corhmunfea- 
tion with tt>e put>fic swftched line network 31. In step 
S2201, the ground station for example, not shown, of 
the pubik: switched line rietwork 31 estatHishes a con- 
nection with the telephone-^egrated terminal devk» 
501. 

[0164] In step S2102, the ISP connectton program 
702 off the telephone-Integrated terminal device 501 es- 
tablishes a conr>ectk>n with the tSP 32 via the connec- 
tion between the telephone-^egrated tenninal devfee 
501 and the public switehed lir>e network 31. In step 
S2301 , the ISP 32 establishes connectk>n vWth the tel- 
ephone-integrated terminal devk» 501 via the connec- 
tion between the telephone-integrated terminal devk^e 
501 ar>d the pul>ric switched line network 31. 
[0165] The sut>sequent processes between the tele- 
phone-integrated terminal device 501 and the key serv- 
er 21-1 , the contents server 22-1 » the shop server 23-1 
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or the proxy server 503 are executed via the connection 
between the telephone-tntegrated terminal device 501 
and the ISP 32. 

[01 66] In step S21 03, the IP communication program 
701 of the telephone- integrated terminal device 501 es- 
tablishes IP communication with ttie shop server 23-1 . 
In step S2401, the IP communicatfon program 124 of 
the shop server 23-1 e8tat>(ishe8lPcomrmin»cationwith 
the shop server 23-1 . 

[0167] In step S2402, the cortfents-aocess program 
123 of the shop server 23-1 serxls digital data for view- 
ing (or for contents selection) to the tetephorie-integrat- 
ed terminal device 501 via the corTwrnmlcation network 
4. In step S2104. a t>rowser program, not shown, of the 
telephor>e4ntegraled terminal device 501 dteptays the 
text or image corresponding to the received digital data 
onto the display block 606 for viewing by the user. The 
t>rowser program of the telephone-integrated terminal 
device 501 also makes ttie audio reprocfciction block 607 
reproduce the contents in a 8treamir>g reproduction 
manner for the test-listening by the user or the contents- 
access pro-am 123 of the shop server 23-1 search for 
a desired piece of contents on the basis of a keyword 
iTYputted tiy the user, dtsplaynig the results on the dteplay 
block 608. 

[0168] The processes of steps S2402 arKt S2104 are 
repeated for a request by the user of tf>e telephone4n- 
tegrated terminal device 501 , unta the user determines 
the contents to be purchased for example. 
[0169] In step S21 05, tt>e browser program of the tel- 
ephone4ntegrated lemnfnal devfcc 501 sends a pur- 
chase request to the shop server 23-1 via the commu- 
nteation network 4. In step S2403, the contents-cKx^ess 
program 1 23 of the shop server 23-1 receives the pur- 
chase request sent from the telephone-Integrated ter- 
minal device 501 . 

[01 70] In step S2404, In response to tf>e purchase or- 
der received tn step S2403, a contents information 
sending program 122 of the shop server 23-1 sends, to 
the telephone-integrated terminal device 501 via the 
communk:atk>n rtetwork 4, the contents informatk>n In- 
cluding the URL of the contents server 22-1 for distnb- 
utir>g tfie contents and the contents ID for kJentifying the 
contents. In step S2106, the contents Inforrtiation re- 
ceiving program 727 of the telephorte-fntegrated termi- 
nal device 501 recer>res the conterrts information from 
the shop server 23-1 . 

[0171] In step S2405, the key information sending 
program of the shop server 23-1 sends, to the tele- 
phone-integrated termvial devfce 501 via the communi- 
catk>n network 4, the key infonmatk>n such as the URL 
of the key server 21-1 that distnljutes the contents key 
of the contents speckled in the purchase request re- 
ceived 'm step S2403. In step S21 07, tt>e key information 
receiving program 726 of the telephone-integrated ter- 
minal devk:e 501 recehres the key informatk>n sent from 
the shop server 23-1 . 

[01 72] In slep S21 08, the IP communk:atk>n program 


701 of the telephone-integrated terminal devfce 501 es- 
taWishes IP communK»tk>n with the proxy server 503 
on the basis of the URL of ttie proxy serverSOS recorded 
in advance. In step S2501, the IP communfeatk>n pro- 
5 gram 751 of the proxy server 603 estabOshes IP com- 
munfcation with tt>e telephone-integrated terminal de- 
vk:e501. 

[0173] In step S2109, the server authentfeation pro- 
gram 722 of the Ifeense management program 711 of 
to the telephone-integrated terminal devtee 501 authenti- 
cates the proxy server 503. In step S2S02, tlie PD au- 
thentk»tton pro^pam 782 of the Scertse management 
ptogmm 761 of the proxy server 503 authentfeates the 
telephone-integrEtfed terminal devk» 501 . 

IS [0174] The cross-auther4k»tk>n processes between 
the teiephorte-^tegrated terminal devk^e 501 and tfie 
proxy server 503 In step S21 09 and step S2502 am ex- 
ecuted in a challenge and response scheme. As com- 
pared with the cross-authentfcatkm between the key 

^ server 21-1 and the personal computer 1 Instep S112 
arKi step S602, the challenge response schenr>e r>eeds 
less computatkmal load and therefore provfcles quick 
execution wfth less computattortai performance and 
storage size. The telephone-integrBted terminal devfee 

25 501 and the proxy server 503 each generate a tempo- 
rary key from tt>e response by a seme corr^Hitatlonal 
operation arKi share the generated temporary key. 
[0175] If the cross-autr>entfcatk>n in steps S2109 arni 
S2502 fails (namefy, the other party of tfie cross-autherv 

30 tk»Afc>n is found invalkl), the process of downk>acfirig the 
contents by the telephone^rrtegrated temtlnal devfc^e 
501 ends wRfK>ut ck)wnk>ading the contents. 
[01 76] tn step S21 1 0, tfte contents managenr>ent pro- 
gram 725 of the telephone-Integrated termlruil devk^e 

35 501 sends the contents ID to the proxy server 503. In 
step S2503, the proxy server 503 receives the contents 
ID supplied from the teiephone^ntegrated terminal de- 
vfce 501 . In step S2111, the key management program 
724 of the telephor>e-integrated terminai devfce 601 

^ sends the key information received in step S2 1 07 to the 
proxy server 503, In step S2504, the proxy server 503 
receh^ ttie key informatfcn supplied frpm the tele- 
phone-integrated terrr^nal devfce 501 . 
P>177] tn step S2505. on the t>asis of the contents ID 

^ recehred In step S2503. a system kientffteatk>n program 
773 of the proxy server 503 identMies that the contents 
and its contents key have been downk>aded from the 
server 5-1. 

[0178] It shouki be noted that, in step S2110, the tei- 
50 ephone-integrated terminal devfce 501 may send the 
URL of the corUents server 22-1 along with the contents 
ID and, in step S2503, the proxy server 503 nrtay receive 
the URL of the contents server 22-1 along with the con- 
tents ID. 

55 [0179] lnstepS2506.onthebasisoftheidentiffcatk>n 
result of step S2505, the IP communfcatton program 751 
of the proxy server 503 establishes IP comrminfcatfcn 
with the contents server 22-1 . In step S2601 . the IP com- 
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munication program 1 93 of the contents server 22-1 es- 
tablishes IP communication with the proxy server 503. 
[0180] In step S2507^ the contents nDartagement pro- 
gram 772 of the proxy server 503 sends the contents ID 
obtained In step S2503 to the contents server 22-1 via 
the corT¥nunicatk>n network 4. In step S2602, the con- 
tents &efver22-i receives the contents ID supplied from 
the proxy server 503. In step S2603, a contents distri- 
butk>n progrant 192 of the contents server 22-1 reads 
the contents (encrypted) corresponding to the contents 
ID received in step S26Q2 from a contents storage pro- 
gram 1 91 arxl distrtHJtes the contents to the proxy serv- 
er 503 via the communteation network 4. 
[0181 J In step S2508, a receiving program 785 of the 
contents nnanagentent program 772 of the proxy server 
503 receives the contents supplied from the contents 
server 22-1. 

[0182] lnstepS2S09,onthebasisoftheklentffk»tion 
result in step S2505, the IP communk»tk>n progrm 751 
of the proxy server 503 estat>li8hes IP communk:atk>n 
with the key sender 21-1. In step S2701 , the IP corrmm- 
nk:atk>n program 155 of the key server 21-1 e8tat>lishes 
IP communk:atk>n with the proxy server 503. 
[0183] In step S2S10, the server authenticatk>n pro- 
-am TBI of the Rcense management program 761 of 
the proxy server 503 authentk^ates the key server 21 -1 . 
In step S2702, the authentteation program 151 erf tf>e 
key server 21 -1 authentk»tes the proxy server 503. 
[0184] Forexample.thekeyserver21-1 storesamas- 
ler key KMSS in advance and the proxy server 503 
stores a private key KPCC and the ID of the pmxy server 
503 beforehand. In acfclition, the proxy server 503 stores 
anutster keyKMOC in advartce and the key server 21 -1 
stores the ID of the key server 21-1 and a private key 
KPSS. 

[0185] Tt^e key server 21-1 receives the ID of the 
proxy server 503 therefrom and applies a hash function 
to the recent ID and the master key KMSS of the key 
server 21-1. generating a same key as the private key 
KPCC of the proxy server 503. 

[0186] The proxy server 503 receives the ID of the key 
server 21 -1 therefrom and applies a hash f unctkm to the 
received ID and the master key KMCC of the proxy serv- 
er 503, generating a sanne key as the private key KPSS 
of the key server 21-1. Consequently, the common key ^ 
is shared between the proxy server 503 and the key 
server 21 -1 . By use of these private keys, a temporary 
key is generated. 

[0187] If the cross-authenticatk>n in step 52510 or 
S2702 fails (namely, the other party of the cross-authen- J 
tk^tlon is found invalid), the downk>ad processing 
comes to an erKi, 

[0188] In step 8251 1 . the key management program 
771 of the proxy server 503 sends the contents ID ob- 
tained in step S2503 to the key server 21-1. In step 5 
S2703. the key server 21-1 receives the contents ID 
supplied from the proxy server 503. In step S2704. the 
key dislribulfon program 152 of the Icey server 21-1 


reads the contents key stored in the key storage pio- 
gram 153 in assoctatk>n with the contents ID and sends 
the contents key (encrypted by the tenporary key 
shared t>etween the key server 21-1 and the proxy serv- 
5 er 503) to the proxy server 503. In step S2512. the key 
receiving program 783 of the key management progrm 
771 of the proxy server 503 receives the contents key 
sent from the key server 21 -1 . 

CP189] In step S2513, the key dist]rft>ution progrm 
»o 784 of the key management program 771 of the proxy 
server 503 decrypts the contents key receh^ ki step 
S2512 ty the temporary key shared b^ween the key 
senfer21-1 and the proxy senrer 503 and then encrypts 
the contents key by the temporary key shared between 
'5 the telephone-^tegrated tenninal devk» 501 and the 
proxy server 503, sem^ the resultartf contents key to 
the telephorie-integrated terminal devk» 501 over the 
communk:»tk>n network 4. In step S2112, the r&ceMng 
program 731 of the key nwmgement progrwt 724 off 
20 the telephone-integrated terminal devfce 501 receives 
the contents key sent from the proxy server 603. The 
key mariagement program 724 decrypts the received 
contents key t>y the ten^porary key shared between the 
telephorte-integrated terminal devk» 501 and the proxy 
25 sen^ 503 and supplies the decrypted contents key to 
the key management program 102 of the portable me- 
cfium 3-1 to store the contents key therein. 
£0190] In step S2514, the contents cSstrt>utk>n pro- 
gram 786 off the contents managemem program 772 off 
30 the proxy server 503 sends the encrypted contents to 
the telephone-integrated terminal devfce 501 over the 
communicatk>n n^ork 4. In step S2113. tr>e receiving 
program 732 of the contents maruigement program 725 
of the telephone-integrated terminal devk^e 501 re- 
35 ceives the contents supplied from tf>e proxy server 503. 
[0191] In step S2114. the PHS/IMT communicatx>n 
program 703 off the telephone-integrated terminal de- 
vice 501 disconnects the connectk>n with the public 
switched line network 31 . In step S2202. the ground sta- 
^ lion, not shown of the public switched line network 31 
disconnects the connectk>n with the telephone-integrat- 
ed terminaf device 501 . 

[01921 In step S2115, the format management pro- 
grwn 713 off the telephone-integrated terminal devk» 

w 501 converu the format off the contents received In step 
S21 13. The contents management progrm 725 sends 
the format-converted contents to the portable medium 
3-1 via the interface 609 and stores the contents in the 
contents management program 103. upon whk^h the 

» download processing comes to an end. 

[0193] The foltowing describes a process of down- 
loading contents by the telephone-integrated terminal 
devfce 601 from the server 5-2 with reference to the 
flowcharts shown in FIGS. 1 3 and 1 4. The processes of 

5 steps 3101 through S3504 are executed by the server 
5-2, the IP communication program 701 . the ISP con- 
nectk>n program 702. the PHS/IMP communication pro- 
gram 703. and the downtoad program 712. These proc- 
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esses are the same as those of stef>8 S2101 through 
S2504 and ther^ore their descrfr^Sons wftl be skipped. 
[0194] In step S35a5« on the t)aste of the contents ID 
received in step S3603, the system Identfflcation pro- 
gram 773 of the proxy server 503 Identtfies that the con- 
tents and (ts contents key have been downk>aded horn 
ttfe server 5-2. 

[0195] ln8tepS3506,onthebasisofthekienttk»tion 
result obtair>ed ki step S3505. the IP communk»tion 
program 751 of the proxy server 503 establishes IPcor>- 
nectkm with the key server 21 -2. In step S3701 , the key 
server 21-2 estabishes IP communk»tk>n with tt>e 
proxy server 503. 

[0196] In step S3507, the server authentfeatkm pro- 
gram 781 of the proxy server 503 authentfcates the key 
server 21 -2. In ^ep S3702, the key server 21 -2 authenr 
tfeates the proxy server 503. 

[01 971 "Ttte processes of steps S3507 arKi S3702 are 
the same asltiose of steps S2510 arKi S2702. 
IP198] If the authentk»tk>n in step S3607 or S3702 
fails (narT>ely. the other party of the authentfeatkm is 
fourKi invald), the downk>ad processing comes to an 
end. 

[0199] In step S3508. the key management program 
771 of the proxy server 503 sernts tt>e contents ID ob- 
tairted in step S3503 to the key server 21-2. In step 
S3703» the key server 21-2 receives tt»e contents ID 
supplied from the proxy server 503. In step S3704 the 
key server 21-2 reads the contents key stored ^ asso- 
ciated with the contents ID and sends ttie contentB key 
(erK:rypted by the temporary key shared between the 
key server 21-2 and the proxy server 503) to the proxy 
server i503 over ttie comrnunk^atkm network 4. In step 
S3509, trie key receiving program 7B3 of the key man- 
agement program 771 of the proxy server 503 receives 
the contents key sent from the key server 21-2. 
[0200] In step S351 0, on the basis of the identlfk^tion 
result obtair^ in step S3506. the IP communk^ation 
program 751 of the proxy server 503 establishes IP 
communk:ation wfth the contents server 22-2. In step 
S3G01, the contents server 22-2 establishes IP commu- 
nk»tk>n with the proxy server 503. 
[0201] In step 3511 , the contents management pro- 
gram 772 of the proxy server 503 sends the contents ID 
obtair>ed In step S3503 to the contents server 22-2 over 
the convnunk:atk>n r>etwork 4. In step S3602, the con- 
tents server 22-2 recedes the contents ID sent from tt>e 
proxy server 503. In step S3603. the contents server 
22-2 reads ttie contents (encrypted) corresponding to 
the contents ID received in step S3602 and distrftnites 
the contents to the proxy server 503 over the communi- 
cation network 4. 

[0202] In step S3512. the receiving program 785 of 
the contents managerrient program 772 of the proxy 
server 503 receives the contents sent from the contents 
server 22-2. 

[0203] The processes of steps S3512 through S31 15 
are the same as those of steps S2513 through S2115 


and ttieref ore tf>eir descrfptkms wOl be skipped. 
[0204] Thus, by means of the proxy server 503, the 
tetephone-lnte^ated termfrial devfee 501 can receive 
contents and fts contents key in the same procedure (for 
s examplOp contents is received after the receptkm of Its 
contents key) regardless of whether contents and Us 
contents key are downk>aded from tt>e server 5-1 or the 
server 5-2. 

[0205] The procedure descrft>ed above with refererx:e 
io to the fkywcfiarts of FIG^S. 11 through 14 can makes ft 
shorter in time for the telephone-integrated termlrMd de- 
vtee 501 kept conr>ected to ttie pubfic switched line ne^ 
work 31 than the processing ki whfeh the proxy server 
503 converts the erKXKfing cmd encryption scfiemes of 
contents (to be descrt>ed wfth reference to the ftow- 
charts shown in FIGS. 16 arKi 17). 
[0206] The fofk)wlng describes andther functknial 
configuration of the cjl^tal data transmission system ae> 
sedated with ttie present invention wfth reference to 
^ FIG. 16. wkh reference to RG. IS, components sknOar 
to those prevkHisly descrtt>ed with RG. 10 are denoted 
t>y ttie same reference numerals and ttieref ore ttieir de- 
scr1ptk>ns wiH be skipped. 

(0207] A telephone-integrated terminal devfce 501 
^ stiown in FIG . 1 6 does not have the format management 
program 713 whk:h is arranged in the above-mentioned 
embo<fiment. 

[0208] A server LCM 51 4 of a proxy server 503 shown 
U\ RG. 15 includes a format management pro-am 801 

^ in adcfition to a license management program 761 and 
a sequence management program 762. 
[0209] The format management program 801 con- 
verts the encoc&ig and encfyptk>n schemes of the con- 
tents downloaded from a contents server 22-1 or 22-2. 

35 The f onmat management program 80 1 consists of a sys- 
tem kJentificatkm program 811 and a format converskHi 
program 812. 

[0210] The system kSentification program 811 kientf- 
fies whether a partk^lar piece of contents has k>een 

^ dovtmloaded from the server 5-1 or the server 5-2. Ttie 
fomnat conversk>n program 812 converts ttie erKXxSng 
and encrypting schemes of downk>aded contents into 
predetermined erxxxfing and encryptkm schemes. 
[0211] The following descnbes a process of down- 

^ k>acfing contents by ttie teleptione-lntegrBted terminal 
devbe 501 and the proxy server 503 whose configura- 
tion are shown in FIG. 15 from ttie server 5-2» with ref- 
erence to the fkywcharts shown in FIG^S. 16 and 17, 
[0212] The processes of steps S41 01 throu^ S4512 

so are the same as those of steps S3 101 through 83512 
and therefore their descriptk>ns wilt be skipped. 
p>213) In step 8451 3. the format management pro- 
gram 801 of the proxy server 503 converts the format of 
the contents received in step 84512. 

S5 [0214] In step S4514, the key distribution program 
784 of the key management program 771 of the proxy 
server 503 decrypts the contents key received \n step 
S4509 by the temporary key shared t>etween the key 
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server 21 -2 and the prox/server 503 and then encrypts 
by the terrporary key shared b^ween the telef>hone- 
fntet^ed terminal devtce 501 artd the proxy server 503. 
^ sending the resultant contents key to the telephone-m- 
tegrated terminal devfc:e 501 over the communk»tk>n 
network 4. In step S4112, the receiving pros^am 731 of 
the key mariagement program 724 of the telephor>e-in- 
tegrated terminal devk» 501 receives the contents key 
sent from the proxy server 503. The key mar)agenr>ent 
program 724 decrypts the received contents key by the 
temporary key shared b^ween the telephone-integrat- 
ed temr^nal devica 501 arxS the proxy server 503 ar>d 
supplies the decrypted contents key to the key manage- 
merrt program 102 of the portable mecfiitfn 3-1, the con- 
tents key being stored In the key martagement program 
102. 

[0215] In step S4515, the contents distrftnition pro- 
gram 786 of the contents maruigement program 772 of 
the proxy server 503 sends the encrypted contents to 
the telephone-inte^ated terminal devk:e 501 via the 
communfe^ion network 4. k\ step S4113» the receMr>g 
program 732 of the corrtents managemervt progrm 725 
of the telephone-integrated terminal device 501 re- 
ceives the contents sent from the proxy server 503. The 
contents management program 725 supplies the re- 
ceived contents (havir>g converted format) to the porta- 
ble nr>edium 3-1 over the interface 609, the contents be- 
ing stored in \h& contents management progrEim 103. . 
[0216] In step S4114, the PHS/IMTT comnmjnfcation 
program 703 of the telephone-lntegrBted tenninal de- 
vk» 501 cSsconnects the conhectkm wfth the pubBc 
switched Bne network 31 . In step S42Q2. a ground sta- 
tk>n. not shown, of the publk; switched line network 31 
for example disconr>ects the connection with the tele- 
phone-integrated termirtal devfee 501. upon whk:h the 
download processing comes to an eruJ. 
[0217] It shoukJ be noted that the process of receiving 
the contents and its contents key from the server 5-1 is 
executed In a procedure In whk:h. after the proxy server 
503 receives contents from the server 5-1 . the contents 
key ts received by the server 5-1. 
[0218] Thus, the proxy server 503 can convert the en- 
coding and encrypting scfiemes of the contents re- 
ceived from the server 5-1 or 5-2 and supply the result- 
ant contents to the telephorte-lntet^ed term^al devk:e 
501 . In this case, the telephone-integrated terminal de- 
vice 501 need not have the programs for converting the 
contents erxxxilng ar>d ericrypting schemes. Therefore, 
the telephone-integrated terminal devk^ 501 can re- 
ceh^e contents faster with less computatk>nal power and 
storage size than the embocfiment shown in FIG. 10. 
[0219] In the at>ove. contents has been descrft>ed to 
be musk: data. It will be apparent to those skiUed in the 
art that contents may also be stHI pk:ture data, moving 
pk:ture data, text data, or a program. 
[0220] In the above, the lelephone-fritegrated termi- 
nal devk:« 501 or the persormi computer 502 download 
contents. It will be apparent to those skilled in the art 


that a mobile telephone, a PDA (Personal Digftal Assist- 
ant), a cfigit^ vkieo cassette recorder having communi- 
catfon arxl Imaging capabilities, an electron^ notepad 
having communk»tk>n capabflities. or a portable per- 
5 sonal computer may downk>ad contents, in addition to 
the telephone-inte^ated terminal devk» 501 and the 
persor>al computer 502. 

[0221] In the at>ove, the telephone-integrated termi- 
nal devfc:e 501 makes necessary communk:atk>n by 

to meansof f>HS or MiT. It will be apparent to those skilled 
in the art that the telephorte-integrated terminal devfc» 
501 attemathrely may make communteation by means 
of W-CDMA (Code Dtviskm MuMple Access), sateffite 
conrvnunfeatkxn. sateOrte t>roadcasting. PSTN (PutHk: 

/5 Swifched Telephone Network), xDSL (x Digital Sut>- 
scriber Line), ISDN (Integrated Servfces Digital Net- 
worlQ. or a private rtetwork. 

[0222] The above-mentioned sequerKes of process- 
es can be executed by hardware or software. The exe- 

20 cutk>n by software is supported by a computer in whteh 
the programs consttudng the software are instaled ki a 
defeated hardware device b^orehand or by a general 
purpose personal computer capable of executing vari- 
ous capabilities in whk:h these programs are installed 

25 from the program storage medium. 

[0223] The program storage medium for storing com- 
puter-readable arnf executable programs may t>e a 
package medium constituted by the magnetk: disk 641 
or681 (inclu(Sngfk>ppycfisk).theoptk:aldisk642or682 

a> (including CD-ROM (Compact Disk-Read Only Memo- 
ry) and DVD (Digftal VersatBe Disk)), the magneto-opti- 
cal disk 643 or 683 (including MD (Mini Disk)), or the 
semkxmductor memory 644 or 664 or the ROM 602 or 
652. or the HDD 661 on which the programs are stored 

35 temporarily or penmartently as shown In FIGS. 8 or 9. 
Programs are stored in the program storage medium 
from wired or wireless comrTHink:atk>n media such as a 
kx:al area network, the Intemet. and digital satellite 
broadcasting through the communteatk>n bk>ck 608 or 

^ 663 as required. 

[0224] It shouM t>e noted that the steps descnbing the 
programs to be stored in the program storage medium 
are not only executed In a tfrne-dependent manner In 
the order descrft>ed, t>ut also in parallel or in a cfiscrete 

^ manner. 

[0225] It shouki also t>e noted that the system as used 
herein dertotes an entire apparatus constituted by a plu- 
rality of component units. 

[0226] tn the information providing apparatus recited 
50 in daim 1 . the infonnation provkfing method recited in 
claim 5, and the program storage medium recited m 
claim 9, a first information processing unit is authenti- 
cated; a second bif ormatk>n processing unft or a third 
informatk>n processir>g unit is authentk:ated; the recep- 
55 tion of a request to send contents and a key and data 
for kJentifying the second informatfon processing unit or 
data for identifying the third Information processing unit 
is controlled, the request and the data beirtg supplied 
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from the first tnformatkm processing unR; W the data for 
ldenttfyir>g the second Information processfrig unft are 
received, ttie transmission of the request to send the 
contents and the key to the second information process- 
ing unit bi a procedure corresporKing to the secorxf ir>- 
formation processing unit Is controlled* and, t the con- 
Xeftts and the key are received and the data for kfentlfy- 
^g the third informatton processing unft are received 
from the second information processing unit, the trans- 
mis3k>n of the request to serxi the contents and the key 
to tfm third informatkm processirig unft and the reception 
of the contents artd the key from the third information 
processir>g unft Ni a procedure corresporKfing to ttte third 
Information processing unit are controlled; the transmis- 
skMi of the contents and the key to the first information 
proce8sir>g unit is contro0ed. 

[0227] In the information processing apparatus recft- 
ed in dakn 10, the kifprmatk>n processing rr>ettiod recft- 
ed in dalm 14, and the program storage n>e<fium recfted 
in daim 18, a first information provfcfing unft is auttien- 
tfcated; a the transmlsskM) of any or>e of a request to 
serKf contents and a key to the first InformatkHi provMIng 
unft, data for Identffying a second Informatkm providing 
unft for provkiirig the contents and the key, arxl data for 
klentifying a third Information provldir>g unft for provkiir>g 
ttte contents and the key is controBed; and the reception 
of the contents arxi ttte key suppfied from the second 
Information provkfing unit or the third Informatkm pro- 
vkfing unft to the first information provkfing unft Is con- 
trolled. 

[0228] WhBe the preferred embodknents of the 
present invention have been de&crft>ed using spectfk: 
terms, such description is for Bhistratlve purposes only, 
and ft is to be understood that changes and variations 
may be made without departing from the spirft or scope 
of the appended claims. 


to 
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saki key to sakJ secorKi lnformatk>n processfttg 
unft in a procedure corresporKSng to sakt sec- 
ond Informatkm processing unit, arid, ft sakJ 
contents and said key are received arxl sakJ da- 
ta for klentftying sakI third information process- 
ing urut are received fmm said second InfonmaT 
tk>n processing unft, the transmission of sakj 
request to send sakJ contents arkf sakl key to 
saki third Information pRx:esslr>g unft and the 
recei^n of said corrtents arnf scUd key from 
saM third information proce88lr>g unft in a pro- 
cedure corresponcfing to saki third informtatkm 
processing unft; and 

a transmission control means for con trofllrtg the 
transmlsskKi of saki contents ar>d said key to 
said first InformatkMi processfttg unit. 

The information provkfing e^^paratus according to 
daim 1 , further corrprfslng: 

a conver8k>n means for converting at least 
or>e of a encocfing scheme and an encrypdon 
scheme In whfch saki contents is erKX>ded and en- 
crypted into or>e of a predetermined ertcocfing 
scheme and a predetermiried encryptk>n scheme. 

The informatkm providing apparatus accordir>g to 
daim 1, wherein said first information processing 
unft is a portcdHe electronk: devfee for reproducing 
saki contents arKl sakl second Informatkm process- 
ing unft and saki third lnformatk>n processirvg unft 
are servers each bducfir>g a contents server and a 
key server arid each having a cfifferent procedure in 
whk^ contents and fts key are si4>pBed. 

The informatk>n provkJmg apparatus accordlr>g to 
daim 1 , further comprising a server licensed conrv 
pKant module which is constituted as a proxy server. 


Claims 

1 . An information providing apparatus comprising: 

a first authentication means for authentlcatir)g 
a first inforrnatk>n processing unft; 
a secorKJ authentk»tk>n mear)s for authentk»t- ^ 
ing a secorxJ information processir>g unft or a 
third informatk>n processing unft; 
a reception control means for controlling the re- 
ceptkHi of a request to serKf contents and a key 
and data for identify^ sakt second infonnation so 
processing unft or data for identffying saki third 
information processing unft, sakl request and 
said data t>eing suppSed from saW first Informa- 
tion processing unit; 

a communk»tk>n control means for controlllr>g, 55 
if saw data for Identifying said second informa- 
tk>n processing unft are received, the transmis- 
sk>n of saki request to send said contents and 


5. An information providing method comprising the 
steps of: 

autt>entlcatir>g a first irYformation processlrtg 
unft; 

authentk:»tir>g a second kiformation process- 
ing unft or a tfifrd information processing unft; 
controlling the receptk>n of a request to sertd 
contents arW a key and data for kientlfying saki 
second Infomnatbn processir>g unft or data for 
kientifying sakf third informatk>n processing 
unft, sakl request and said data being sillied 
from saki ffrst information p^rocessing unft; 
controlling, if saki data for kientifying saki sec- 
orKi kiformatfon processing unft are received, 
the transmission of said request to send saki 
contents and saki key to saki second Informa- 
tk>n processing unft In a procedure correspond- 
ing to saki second infonmatk>n processing unft, 
and, if said contents and said key are received 
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and said data for Identffying said third informa- 
tion processing untt are received from said sec- 
ond information processing unt, the transmis- 
sion of said request to ser>d said-contents arxi 
said Icey to said third infonnation processing 5 
unit aiKl the reception of said contents and said 
icey from said third Information processing unft 
in a procedure correspon(fir>g to said th'vd in- 
formation processfrig unft; arxl 
controitlng tf>e transmission of said contents io 
and said key to said first information processing 
unit 

The infomnation providing nrtetiKxl accorcKng to 
dakn 5, furtt>er comprising the step of: 

converting at least one of a erxxKfing scheme 
and an erx^ryption scheme in which said contents 
is encoded and ertcrypted into one of a predeter- 
m{r>ed encocfing scheme and a predetermined en- 
cryption scheme. 20 

The infonnation providing method according to 
dafrn 5, wherein said first formation proces8ir>g 
unit is a portat>fe electronic device for reproducing 
said contents arxl said second information process- ^ 
ing unit ami said third information processing unft 
are servers each inducfing a contents server and a 
key server and each havkig a <^erent procedure In 
which contents and fts key are supplied. 

The information provicfing m^hod according to 
c:laim 5, wherein said method Is executed ty a proxy 
server indudtng a server lk:ensed compliant mod- 
ule, 

A program storage mecfium storing a computer- 
readable program comprising the steps of: 

authentk^ating a first information processir>g 
unit; 40 
authentk»tlr)g a second information process- 
ing unit or a third information processir>g ur>lt: 
controilirtg the reception of a request to serKf 
* contents and a key and data for kJentffyfr>g saki 
secorKi irtforrrtation processktg unft or data for 
identifying said third informatk>n processir>g 
unit, said request and sakf data t>elr>g supplied 
from said first informatk>n processing unit; 
controlKng. 9 sakI data for Wentftyirtg sakI sec- 
ond lnformatk>n processlrtg unft are received, so 
the transmtssk>n of saki request to send sakJ 
contents and said key to said second informa- 
tk>n processing unit in a procedure correspond- 
ing to said second infomnatlon processing unft, 
and, sakJ contents and sakJ key are received S3 
and said data for Identifying said third informa- 
tion processing unft are received from said sec- 
ond inforrr^tion processing unft, the trartsmts- 


sk>n of said request to send said contents and 
saki key to saki third kiformatkni processktg 
unft arxf ttie reception of saki contents arKi sakf 
key from sakt third information processirtg unit 
in a procedure corresporKfirtg to said third kv 
f ormatk>n processir^ unit; arKi 
controWng the tran&missk>n of saki contents 
and saki key to saki ftrst information processing 
unft. 

10. An InfonnatkHi processktg apparatus comprising: 

an auttYontication mearts for authenticatkig a 
first kiform^kKi provicfing unft; 
a transmission control mear>8 forcontrolkig the 
transmisskm of any one of a request to send 
contents and a key to saW first informatk>n pro- 
vkfing unft, data for identftying a second ktfor- 
matkm provkiir>g unft for provkSng saki cm- 
tents arwi saki key, and data for kientifylng a 
third InformatkMi provkfing unit for provkfir)g 
said contents and said key; artd 
a receptk>n control means for controlBng the re- 
ceptk>n of saki contents and said key supplied 
from saki second informatfon provkling unft or 
said third information providir)g unft to saki first 
infomnation pn>vkfir>g unft. 

11. The kiformatk>n processing apparatus accorcfing to 
daim 10, wherein said first information provicfir>g 
unft is a proxy server havir>g a server icensed com- 
pliant module ar>d said secorKi kiformatk>n provid- 
kig unft arKl said third informatk>n provkling unH are 
servers each including a contents server and a key 
server arnl each having a cfifferent procecftjre k\ 
which contents and fts key are suppBed. 

12. The informatk>n processing apparatus according to 
daim 10, wherein said information processing ap- 
paratus is a portable electronk: device for reproduc- 
ing saki contents. 

13. The kiformation processing eqoparatus accorcfir>g to 
daim 10, having a downk>ad program capat>le of 
downloadir^g contents from any of said second k>- 
formatlon provkitrtg unit arnl saki third kiformatk>n 
providing unit. 

14. An informatk>n processing method compris^g the 
steps of: 

authenticatir)g a first tnlonrYation provkling unit; 
controllir>g the transrmssion of any one of a re- 
quest to send contents and a key to said first 
informatk>n providing unft, data for klentifying a 
second k)formatk>n providing unft for providing 
said contents and said key, and data for klenti- 
fying a third inforrnatk>n providing unft for pro- 
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vMing said contents and said key; and 
controning the reception of sakJ contents and 
saW key suppfied from said second Information 
provkUng unft or sakf third inf ormatkm provkling 
unit to sakf first lnfonnatk>n provkfing unit. 5 

15. The infonTtatk>n processing method according to 
claim 14, wherein sakJ first Informatton provkfing 
unit Is a proxy server having a server Hcertsed com- 
pliant rrKxkJie and sakf second Information provkf- fo 
ing unit and saki third informatkxi provkfing untt are 
servers each havirtg a contents server and a key 
server and each having a cSfferent procedure In 
whfch contents and ts key are supplied. 

15 

16. The information processing method according to 
claim 14, wherein saki method is executed by a 
portable electronk: device for reproducing sakf con- 
tents. 

17. The informatk>n processing method according to 
dakn 14, wfierein each of said receptk>n controllirtg 
^eps is executed by a downk>ad program capable 
of downloac^g contents from any of said secorKi 
Information providing unit and sakJ third Information ^ 
provkling unft. 

18. A program storage medium storing a computer- 
readai)le pro-am comprisir)g: 

30 

authentfc^atlng a first informatkm providing unit; 
controlUng the transmission of any one of a re- 
quest to send contents ar>d a key to saki first 
information provkilng unit, data for kientifytng a 
second information provkSng unft for provkfing 35 
saki contents and saki key, and data for kientl- 
fylng a third Information provkfirig untt for pro- 
vidtng said contents and sakJ key; and 
controlllr>g the reception of saki contents and 
said key supplied from said second information 40 
provkf ir>g unit or saki third inf ormatk>n provkfir>g 
unit to saki first lnformatk>n provkiing unit. 
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